Stephen Smoogen
2002-Oct-04 21:21 UTC
Confirming kerberos for upcoming OpenSSH portable release.
O.K. I know it was too late to make changes for the next release, but thankfully there werent any changes needed. Kerberos over ssh protocol 1 worked out of the box from CVS today (2002/10/04-14:30) The krb5 patches we were using (I think from Olaf K) was all in the code. The only thing I had to patch to get things working was removing the scard-install from the Makefile.in The compiled code then worked for us for our ssh1 krb connections. Now to just get the IETF GSSAPI group to approve things :), and we will be so happy here. Now to see if I can help Simon (well at least moral support). Thankyou for your work. Stephen -- Stephen John Smoogen smoogen at lanl.gov Los Alamos National Laboratoy CCN-2 PH: (505)-665-9408 Ta-03 SM-30 MailStop D445 DP 01U Los Alamos, NM 87544
Stephen Smoogen
2002-Oct-04 21:46 UTC
Confirming kerberos for upcoming OpenSSH portable release.
Dave Williams reminded me the following to make this useful. OS: Red Hat Linux 7.3 Test kinit -f ssh -1 localhost klist -5afe ssh -1 Red Hat Linux 7.1 w/ openssh-3.4p1-server klist -5afe ssh -1 Solaris running ssh-1.2.27 klist -5afe All worked correctly. Forwarding worked on openssh w/ patches which suprised me. The only thing I cant test is going from 1 Kerberos realm to another. On Fri, 2002-10-04 at 15:21, Stephen Smoogen wrote:> O.K. I know it was too late to make changes for the next release, but > thankfully there werent any changes needed. Kerberos over ssh protocol 1 > worked out of the box from CVS today (2002/10/04-14:30) > > The krb5 patches we were using (I think from Olaf K) was all in the > code. The only thing I had to patch to get things working was removing > the scard-install from the Makefile.in > > The compiled code then worked for us for our ssh1 krb connections. Now > to just get the IETF GSSAPI group to approve things :), and we will be > so happy here. Now to see if I can help Simon (well at least moral > support). > > Thankyou for your work. > Stephen > > > -- > Stephen John Smoogen smoogen at lanl.gov > Los Alamos National Laboratoy CCN-2 PH: (505)-665-9408 > Ta-03 SM-30 MailStop D445 DP 01U Los Alamos, NM 87544 > > _______________________________________________ > openssh-unix-dev at mindrot.org mailing list > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev >-- Stephen John Smoogen smoogen at lanl.gov Los Alamos National Laboratoy CCN-2 PH: (505)-665-9408 Ta-03 SM-30 MailStop D445 DP 01U Los Alamos, NM 87544